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IN THE CLAIMS; 

1. (Currently amended) A computer-implemented method of generating a security 
object for use in authenticating a user to access s e eming an item, comprising computer- 
implemented steps of : 

receiving security object data; 

setting one or more attributes associated with the security object data, wherein the 
one or more attributes include a user designation of a security object type; and 

encapsulatin g, within the security object, the security object data and the one or 
more attributes with one or more methods, wherein the security object is used to 
authenticate the user by validating an identity of the user using at least one of the one or 
more methods encapsulated within the security object oontrol ace ess- to - s e cur e d cont e nt s. 

2. (Currently amended) The computer-implemented method of claim 1, further 
comprising obtaining the one or more methods from a security object class. 

3. (Currently amended) The computer-implemented method of claim 1, wherein the 
one or more methods operate on the security object data and one or more attributes. 

4. (Currently amended) The computer-implemented method of claim 1 , wherein the 
one or more methods operate on the security object data and input data provided bv the 
user and passed to the security object to authenticate the user to access the item , 

5. (Currently amended) The computer-implemented method of claim 1, wherein the 
security object data is one of textual data, audio data, graphical data, and biometric data, 

6. (Currently amended) The computer-implemented method of claim 1, wherein the 
security object type is one of a single use security object, a group security object, a timed 
security object, a concurrent multi-user security object, a security object throttle, a 
translated password security object, a security object augmented by a at least one of a 
CPU identifier, a CPU speed and a system configuration, a Wave file or MP3 security 
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object, an image file security object, a security object augmented by a location of the 
user, a security object augmented by a current window and/or pointer position, a security 
object augmented by an IP address, a security object augmented by a screen background 
characteristic, a security object augmented by a personal identification number one of a 
speed of a card swipe and a number of times of 3 card swipe, a security object augmented 
by a mobile telephone ring or mobile telephone identification number, a security object 
augmented by a caller identification of the user, and a security object augmented by an 
environmental condition. 

7. (Currently amended) The computer-implerrrntP^ met hod of claim 1 , further 
comprising: 

providing the security object to a security system, wherein the security system is 
a s t- mado aware o f the coonritj u b jc a type a hardware data nrn^,i n g system that *tnr~ 
the security object and associates the securirv o bject with a us cr identification sn that th~ 
security object, may be retrieved when the user ente rs their identification in order tn ff »in 
access to the if am 



8. (Curremly amended) The computer-implement,*! me thod of claim 7, wherein the 
security system invokes the security object in response to a request for access to the item 
by the user. 



9. (Currently amended) The computer-imnrsmpnt^ method of claim t , storing the 
security object data on an electronic medium in a device with data transmission 
capability. 

10. (Currently amended) The computer- impl^nt^ method of daim 9 wherem ^ 
device is a portable device. 

H. (Currently amended) The computer-impl^^ method of cIaim 9 wherein ^ 
portable device is one of a keychain, a portable MP3 player, a mobile telephone, a pager, 
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an electronic wrist watch, a remote control, a garage door transmitter, a keyless entry 
device for a vehicle, a smartcard, and a magnetic stripe card. 

12. (Currently amended) The computer-implemented method of claim 7, wherein the 
security object contains a partial set of methods and wherein the security system contains 
a complementary set of methods. 

13. (Currently amended) The computer-implemented method of claim 1, wherein the 
security object requires hardware assistance for authentication of input data passed to the 
security object 

14. (Currently amended) The computer-implemented method of claim 1 , wherein the 
security object data is received from a client apparatus. 

15. (Currently amended) The computer-implemented method of claim I , wherein the 
Security object data is received from a user via a user interface. 

16. (Currently amended) The computer-implemented method of claim 15, wherein 
the user interface is a security object foundry application resident on a computing device. 

17. (Currently amended) The computer-implemented method of claim 15, wherein 
the user interface is an interface transmitted from a server apparatus to a client apparatus. 

18. (Currently amended) A computer program product in a computer readable 
medium for generating a security object for use in authenticating^ user to access s e curing 
an item, comprising: 

first instructions for receiving security object data; 

second instructions for setting one or more attributes associated with the security 
object data, wherein the one or more attributes include a user designation of a security 
object type; and 
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third instructions for encapsulatin g, within the security object the security object 
data and the one or more attributes with one or more methods, wherein the security object 
is used to authenticate the user bv validating an identity of the user using at least one of 
the one or more methods encapsulated within the security object control access to se cured 
contents . 

19. (Original) The computer program product of claim 18, fourth instructions for 
- obtaining the one or more methods from a security object class. 

20. (Original) The computer program product of claim 18, wherein the one or more 
methods operate on the security object data and one or more attributes. 

2 J . (Currently amended) The computer program product of claim 18, wherein the 
one or more methods operate on the security object data and input data provided bv the 
user and passed to the security object to authenticate the user to access the item . 

22. (Original) The computer program product of claim 1 8, wherein the security 
object data is one of textual data, audio data, graphical data, and biometric data. 

23* (Original) The computer program product of claim 18, wherein the security 
object type is one of a single use security object, a group security object, a timed security 
object, a concurrent multi-user security object, a security object throttle, a translated 
password security object, a security object augmented by a at least one of a CPU 
identifier, a CPU speed and a system configuration, a Wave file or MP3 security object, 
an image file security object, a security object augmented by a location of the user, a 
security object augmented by a current window and/or pointer position, a security object 
augmented by an IP address, a security object augmented by a screen background 
characteristic, a security object augmented by a personal identification number and one of 
a speed of a card swipe and a number of times of a card swipe, a security object 
augmented by a mobile telephone ring or mobile telephone identification number, a 
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security object augmented by a caller identification of the user, and a security object 
augmented by an environmental condition. 

24. (Currently amended) The computer program product of claim 18, further 
comprising: 

fourth instructions for providing the security object to a security system, wherein 
the security system is not made awar e of th e- s e curity obj e ct type a hardware data 
processing system that stores the security object and associates the security object with a 
user identification so that the security object may be retrieved when the user enters their 
identification in j>rder_to gain access to the item . 

25. (Currently amended) The computer program product of claim 24, wherein the 
security system invokes the security object in response to a request for access to the item 
by the user. 

26. (Original) The computer program product of claim 1 8, further comprising fourth 
instructions for storing the security object data on an electronic medium in a device with 
data transmission capability. 

27. (Original) The computer program product of claim 18, further comprising fourth 
instructions for storing the security object data in a portable device. 

28. (Original) The computer program product of claim 27, wherein the portable 
device is one of a keychain, a portable MP3 player, a mobile telephone, a pager, an 
electronic wrist watch, a remote control, a garage door transmitter, a keyless entry device 
for a vehicle, a smartcard, and a magnetic stripe card. 

29. (Original) The computer program product of claim 24, wherein the security 
object contains a partial set of methods and wherein the security system contains a 
complementary set of methods. 

Page 6 of 14 
Rodriguez et al. - 09/942,634 

PAGE 8/16 ' RCVD AT 811512005 5:10:15 PM [Eastern Daylight Time] * 8VR:USPTO-EF)fliF«6/28 * DNI8:273!300 * CS!D:9723857766 * DURATION (mm«ss):04-28 



08V15/2085 16:11 9723357766 



YEE & ASSOCIATES, PC 



PAGE 89 



30. (Original) The computet program product of claim 18, wherein the security 
object requires hardware assistance for authentication of input data passed to the security 
object 

31. (Original) The computer program product of claim 18, wherein the security 
object data is received from a client apparatus. 

32. (Original) The computer program product of claim 18, wherein the security 
object data is received from a user via a user interface. 

33. (Original) The computer program product of claim 32, wherein the user interface 
is a security object foundry application resident on a computing device. 

34. (Original) The computer program product of claim 32, wherem the user interface 
is an interface transmitted from a server apparatus to a client apparatus. 

35. (Currently amended) An apparatus for generating a security object for use in 
authenticating a user to access s e curing an item, comprising: 

means for receiving security object data; 

means for setting one or mote attributes associated with the security object data, 
wherein the one or more attributes include a user designation of a security object type; 
and 

means for encapsulatin g, within the security object, the security object data and 
the one or more attributes with one or more methods, wherein the security object is used 
to authenticate the user bv validating an identity of the user using at least one of the one 
or more methods encapsulated within the security object control aceona to goeurod 
contontG . 

36. (Original) The apparatus of claim 35, means for obtaining one or more methods 
from a security object class. 
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37. (Original) The apparatus of claim 35, wherein the one or more methods operate 
on the security object data and one or more attributes. 

38. (Currently amended) The apparatus of claim 35, wherein the one or more 
methods operate on the security object data and input data provided bv the user and 
passed to the security object to authenticate the user to access the item . 

39. (Original) The apparatus of claim 35, wherein the security object data is one of 
textual data, audio data, graphical data, and biometric data. 

40. (Original) The apparatus of claim 35, wherein the security object type is one of a 
single use security object, a group security object, a timed security object, a concurrent 
multi-user security object, a security object throttle, a translated password security object, 
a security object augmented by a at least one of a CPU identifier, a CPU speed and a 
system configuration, a Wave file or MP3 security object, an image file security object, a 
security object augmented by a location of the user, a security object augmented by a 
current window and/or pointer position, a security object augmented by an IP address, a 
security object augmented by a screen background characteristic, a security object 
augmented by a personal identification number and one of a speed of a card swipe and a 
number of times of a card swipe, a security object augmented by a mobile telephone ring 
or mobile telephone identification number, a security object augmented by a caller 
identification of the user, and a security object augmented by an environmental condition. 

41. (Currently amended) The apparatus of claim 35, further comprising: 

means for providing the security object to a security system, wherein the security 
system is not mad e- awaro of the security object typo a hardware data processing system 
that stores the security object and a ssociates the security object with a user identification 
so that the security obj ect may be retrieved when the user enters their identification jn 
order to gain access to the item . 
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42. (Currently amended) The apparatus of claim 41, wherein the security system 
invokes the security object in response to a request for access to the item by the user. 

43. (Original) The apparatus of claim 18, further comprising means for storing the 
security object data on an electronic medium in a device with data transmission 
capability. 

44. (Original) The apparatus of claim 43, wherein the device is a portable device. 

45. (Original) The apparatus of claim 44, wherein the portable device is one of a 
keychain, a portable MP3 player, a mobile telephone, a pager, an electronic wrist watch, 
a remote control, a garage door transmitter, a keyless entry device for a vehicle, a 
smartcard, and a magnetic stripe card. 

46. (Original) The apparatus of claim 41, wherein the security object contains a 
partial set of methods and wherein the security system contains a complementary set of 
methods. 

47. (Original) The apparatus of claim 35, wherein the security object requires 
hardware assistance for authentication of input data passed to the security object. 

48. (Original) The apparatus of claim 35, wherein the security object data is received 
from a client apparatus* 

49. (Original) The apparatus of claim 35, wherein the security object data is received 
from a user via a user interface. 

50. (Original) The apparatus of claim 49, wherein the user interface is a security 
object foundry application resident on a computing device. 
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5L (Original) The apparatus of claim 49, wherein the user interface is an interface 
transmitted from a server apparatus to a client apparatus. 

52. (Currently amended) A method of securing contents, comprising: 

receiving a request for access to the contents, the request including input data 
from a user : 

in response to receiving the request for access, retrieving the a unor d e fined a user 

defined security object previously defined bv the user : 

applying the user defined security object to the input data from the user : and 
controlling access to the contents based on the application of the user defined 

security object to the input data using a tnethod within the user defined security object 
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